Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/UsP6UudqHF-LcaNEElvMFjWhDZA.roa
File: UsP6UudqHF-LcaNEElvMFjWhDZA.roa (raw, json)
Hash identifier: jTg/MO8PYDPOy+aJ3dSxRvB51EQMNhywXeeLx+6Jizg=
Subject key identifier: 52:C3:FA:52:E7:6A:1C:5F:8B:71:A3:44:12:5B:CC:16:35:A1:0D:90
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A01AEC97C380CFBB32FFBC80943489416A
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/UsP6UudqHF-LcaNEElvMFjWhDZA.roa
Signing time: Wed 19 Aug 2026 16:48:27 +0000
ROA not before: Wed 19 Aug 2026 16:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 46.232.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:ec:97:c3:80:cf:bb:32:ff:bc:80:94:34:89:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Aug 19 16:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52c3fa52e76a1c5f8b71a344125bcc1635a10d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:16:03:29:6b:75:cf:fa:d9:de:f3:48:ec:
64:93:f7:fc:66:ac:fc:ec:f2:b2:81:b7:c4:45:02:
29:de:6d:e7:5d:dc:08:60:e9:f4:8c:f3:34:e1:95:
72:83:54:c6:73:1e:43:71:2f:05:47:a3:79:70:5e:
eb:96:52:82:1e:59:d2:3d:ba:95:b6:a8:2a:49:ef:
a7:b4:3c:9d:c0:1d:90:08:bc:9a:58:32:c9:34:2c:
da:d0:ca:88:64:be:2e:48:64:ab:13:82:98:16:d7:
9b:34:dd:31:e7:b6:dd:72:24:ec:12:13:95:99:72:
b6:9b:d3:ec:d1:4c:bc:5f:34:c9:f0:ff:e8:1c:0c:
4e:b7:45:9a:0c:b7:32:3d:ab:02:eb:08:d4:b5:c4:
27:b1:e5:f7:1f:33:2e:0f:1a:e3:07:96:63:99:5b:
65:06:c0:21:ce:16:94:82:5e:99:93:98:92:40:f6:
3e:8f:87:5a:49:f2:e4:62:0f:62:f3:c2:87:7e:d3:
ec:0f:79:01:be:1e:ff:68:c9:4b:c1:0c:ee:6e:62:
a4:55:2f:47:b9:1f:5d:eb:1d:a8:58:71:af:0f:13:
9b:95:2b:b2:d1:ad:79:e1:ef:5b:4e:cc:99:ae:c9:
dd:fb:83:a5:ae:0a:ae:22:d9:4d:6d:45:d0:7c:cd:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:FA:52:E7:6A:1C:5F:8B:71:A3:44:12:5B:CC:16:35:A1:0D:90
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/UsP6UudqHF-LcaNEElvMFjWhDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6d:fa:3b:45:a0:47:a8:36:ac:f5:cc:2e:34:f6:27:79:4c:
96:8a:eb:b3:18:64:d4:ef:bb:00:a5:82:a1:15:7a:64:59:fc:
d1:93:64:12:ec:95:55:32:2b:21:f0:52:84:f4:0b:f9:c9:ea:
1f:31:6b:b9:46:e2:3a:7d:dd:b6:04:83:90:0c:1a:be:f8:64:
8c:cb:96:5a:0d:8f:ab:e5:45:3e:04:c9:7c:e5:42:0f:5b:f1:
ea:3d:aa:c5:84:81:64:ea:fa:6e:fb:84:5f:67:03:49:fb:58:
92:a3:0d:f3:cc:c6:a2:cf:06:59:0d:c1:32:03:6b:f0:66:28:
73:d0:e9:5c:b2:0f:ce:5a:36:cc:90:12:29:47:24:33:da:29:
0f:04:db:07:27:9f:24:98:14:93:3c:7b:8b:49:77:35:29:24:
76:46:eb:08:84:1c:aa:31:44:a1:ea:59:1f:9e:0f:c7:19:3a:
0b:59:b7:4d:90:06:27:cd:60:b2:26:fc:16:e0:eb:a1:99:2e:
3c:03:de:37:53:17:06:f4:cc:fb:de:0e:40:7e:35:27:47:82:
c7:97:60:32:ec:30:32:d9:58:c8:9b:ba:2e:23:e5:ae:7f:df:
55:6c:d5:5a:50:40:51:a2:c2:52:0b:da:bd:ef:a7:4f:85:43:
9e:a5:d1:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAa7JfDgM+7Mv+8gJQ0iUFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjYwODE5MTY0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmMzZmE1MmU3NmExYzVmOGI3MWEzNDQxMjViY2MxNjM1YTEwZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ0WAylrdc/62d7zSOxkk/f8Zqz8
7PKygbfERQIp3m3nXdwIYOn0jPM04ZVyg1TGcx5DcS8FR6N5cF7rllKCHlnSPbqV
tqgqSe+ntDydwB2QCLyaWDLJNCza0MqIZL4uSGSrE4KYFtebNN0x57bdciTsEhOV
mXK2m9Ps0Uy8XzTJ8P/oHAxOt0WaDLcyPasC6wjUtcQnseX3HzMuDxrjB5ZjmVtl
BsAhzhaUgl6Zk5iSQPY+j4daSfLkYg9i88KHftPsD3kBvh7/aMlLwQzubmKkVS9H
uR9d6x2oWHGvDxOblSuy0a154e9bTsyZrsnd+4OlrgquItlNbUXQfM3F0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLD+lLnahxfi3GjRBJbzBY1oQ2QMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvVXNQNlV1ZHFIRi1MY2FORUVsdk1GaldoRFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALujsMA0G
CSqGSIb3DQEBCwUAA4IBAQBmbfo7RaBHqDas9cwuNPYneUyWiuuzGGTU77sApYKh
FXpkWfzRk2QS7JVVMish8FKE9Av5yeofMWu5RuI6fd22BIOQDBq++GSMy5ZaDY+r
5UU+BMl85UIPW/HqParFhIFk6vpu+4RfZwNJ+1iSow3zzMaizwZZDcEyA2vwZihz
0Olcsg/OWjbMkBIpRyQz2ikPBNsHJ58kmBSTPHuLSXc1KSR2RusIhByqMUSh6lkf
ng/HGToLWbdNkAYnzWCyJvwW4OuhmS48A943UxcG9Mz73g5AfjUnR4LHl2Ay7DAy
2VjIm7ouI+Wuf99VbNVaUEBRosJSC9q976dPhUOepdFo
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:04 2026 by rpki-client